chichaylimona.com

Issued by R3

About this certificate

This digital certificate with serial number 04:75:15:77:7e:9b:ce:71:ac:e8:81:a0:51:0a:38:8c:16:fb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=chichaylimona.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:15:77:7e:9b:ce:71:ac:e8:81:a0:51:0a:38:8c:16:fb
Serial Number (int): 388290714895956302276527481671994714101499
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 10:7c:23:13:6a:58:7f:8f:38:ca:9c:49:c8:9f:f1:0d:e9:52:f6:d7
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8a:99:34:c7:f4:e8:c4:0f:5b:0e:d1:09:f4:76:b6:05:53:86:97:e3
Fingerprint (sha256): ca:ce:e7:c0:19:ee:72:f7:51:92:cb:5a:77:f2:bf:97:98:5c:72:bf:75:6b:1a:86:2b:73:dc:1b:3c:8a:81:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate chichaylimona.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chichaylimona.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chichaylimona.com
www.chichaylimona.com

Other certificates including the domain name chichaylimona.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for chichaylimona.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388290714895956302276527481671994714101499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 01:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 01:24:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chichaylimona.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749123163063436721425006779603548537998768263468669512369569976673597772889113085721490265984253580384387966382758984466296979294318270034690491432619845525463499417752694142508243434967875623189685343169157161011607665861122463169513287260967461022785819943032982552531824217381095414345516803528207256368419759514128724930507623720829700402420986572257621801514004855776386954696228072091485228805847434275115553591133830697544987910492411375819679464346515748332172493882678816585003955444888935498711736861151773031138080399619089925875580499445890867441095381455767154759204192413766854202286348163447604304430876565328391200663108222819020453591403848881768680191823726045600111867082345804019623467853573554266900509882752911534782113648744450289038997964648294336355566655731000056591095308834643942714258534719198490163358646425962713839761607188655709131449500001903717009278949420654423034143738741610292381365318861112549383066909281573733653458405026007263050994537574957277023984118524227200473226805137759671469386384531153482491753043810287108428029338142323619866334683712430993194489524382319919281004207916074408042432803545547052852607210815165807738579291654773189786698522559028830800497043061157436399721923447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							107c23136a587f8f38ca9c49c89ff10de952f6d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chichaylimona.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chichaylimona.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ce1bc0bce0000040300463044022024e2cfe135f5cb75e252ba8840d927ad261cc8956cee81f634c1fe83db239bee0220220b3b0f24a89623b009ef05b70e5280cad73ddaa46c1210b05355fead0b5c37007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ce1bc0dcf000004030046304402204ab2937adaf2291981d864dd9912b47a9f6215e39261eb1cb7547f18d5716bd20220371d40a35b70844332ea3ac3d404804f1ebc0e1fc8a97218c4395b440ad5291c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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